The HN login page seems highly insecure- Can any of you pros give an assessment?
I noticed that the login page for HN doesn't have any meaningful security, with no use of SSL: http://news.ycombinator.com/newslogin?whence=news
It seems it would be trivial for someone sniffing packets on the network to steal your HN password- Am I right about this?
I'm not asking this because I'm a stickler for web security: Actually, I'm asking because I'm creating my own website right now and would love to get away with such a crude, easy to program login mechanism :-)
It seems it would be trivial for someone sniffing packets on the network to steal your HN password- Am I right about this?
I'm not asking this because I'm a stickler for web security: Actually, I'm asking because I'm creating my own website right now and would love to get away with such a crude, easy to program login mechanism :-)